Azure
Give the Sazabi agent the Azure CLI (az) in its sandbox to interact with Azure resources using a service principal for non-interactive access.
About
This CLI connection makes the Azure CLI (az) available in the Sazabi agent's sandbox. The agent can interact with Azure resources using a service principal for non-interactive access. The tool is baked into the sandbox image; connecting it authenticates the already-installed CLI.
Prerequisites
- A Sazabi project.
- An Azure service principal: client ID (
AZURE_CLIENT_ID), client secret (AZURE_CLIENT_SECRET), and tenant ID (AZURE_TENANT_ID).
Set up in the dashboard
Configure the sandbox in the dashboard under Settings > Sandbox CLIs.
Find Azure in the catalog
In Settings > Sandbox CLIs, find Azure under Browse sandbox CLIs and choose to connect it.
Provide credentials
Enter the required values: AZURE_CLIENT_ID — the application (client) ID of your service principal; AZURE_CLIENT_SECRET — the client secret; AZURE_TENANT_ID — your Azure Active Directory tenant ID. Optionally set AZURE_SUBSCRIPTION_ID to default all commands to a specific subscription. Save to store them securely; Sazabi injects them into the sandbox when the agent runs.
Set up with the CLI
You can also configure the Azure CLI connection with the Sazabi CLI (installed and authenticated — see CLI reference).
sazabi sandbox-clis set --type azure-cli --env AZURE_CLIENT_ID=<your-client-id> --env AZURE_CLIENT_SECRET=<your-client-secret> --env AZURE_TENANT_ID=<your-tenant-id>To validate the credentials without saving, run the same command with test in place of set (the test command also requires the --env flags).
Verify
Ask the agent, in a thread, to run the az CLI (for example az account show) and confirm it returns real output from your account. If the command is not found, the CLI connection may not be enabled; if it runs unauthenticated, recheck the credentials.
Troubleshooting
Command not found — Confirm the Azure CLI connection is enabled for the project under Settings > Sandbox CLIs.
Authentication fails — Recheck the credential values; a rotated or revoked token must be re-entered under Settings > Sandbox CLIs or with sazabi sandbox-clis set --type azure-cli.